ApacheDS 1.0.2 LDAP java.net.ConnectException: Connection timed out: connect

[Jignesh Gohel]

Hi,

I am a novice to LDAP.I am using ApacheDS 1.0.2 as the directory services application on one machine MACHINE1.
From another machine MACHINE2 I am using the following program to communicate to my LDAP server on MACHINE1.

import javax.naming.*;
import javax.naming.directory.*;
import java.util.Hashtable;


public class SimpleQuery {

    public static void main(String[] args) {
            if (args.length != 1) {
                System.out.println("Syntax: SimpleQuery query");
                return;
            }
            String query = args[0];
	    String ldapUrl = "ldap://MACHINE1_IP or MACHINE1_NAME:10389/";
            try {
                String dirRoot = "o=sevenseas";
                Hashtable env = new Hashtable();
                env.put("com.sun.jndi.ldap.connect.pool", "true");
                env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
                env.put(Context.PROVIDER_URL, ldapUrl + dirRoot);

                env.put("com.sun.jndi.ldap.netscape.schemaBugs", "true");
                env.put("com.sun.jndi.ldap.trace.ber", System.out);

                DirContext context = new InitialDirContext(env);
                SearchControls ctrl = new SearchControls();
                ctrl.setSearchScope(SearchControls.SUBTREE_SCOPE);

                NamingEnumeration enumeration = context.search("", query, ctrl);
                while (enumeration.hasMore()) {
                    SearchResult result= (SearchResult)enumeration.next();
                    String dn = result.getName() + "," + dirRoot;
                    Attributes attribs = result.getAttributes();
                    BasicAttribute cnAttrib = (BasicAttribute) attribs.get("cn");
                    String commonName = (String) cnAttrib.get(0);
                }
            } catch (NamingException ne) {
                ne.printStackTrace();
                System.out.println("Error: " + ne);
            }
    }
}

On executing the following

java SimpleQuery  cn=CorneliusBuckley,ou=people,o=sevenseas

I am getting the following output

-> MACHINE1_IP or MACHINE1_NAME:10389

0000: 30 0C 02 01 01 60 07 02   01 03 04 00 80 00        0....`........


<- MACHINE1_IP or MACHINE1_NAME:10389

0000: 30 0C 02 01 01 61 07 0A   01 00 04 00 04 00        0....a........


-> MACHINE1_IP or MACHINE1_NAME:10389

0000: 30 6E 02 01 02 63 4C 04   0B 6F 3D 73 65 76 65 6E  0n...cL..o=seven
0010: 73 65 61 73 0A 01 02 0A   01 03 02 01 00 02 01 00  seas............
0020: 01 01 00 A3 2C 04 02 63   6E 04 26 43 6F 72 6E 65  ....,..cn.&Corne
0030: 6C 69 75 73 42 75 63 6B   6C 65 79 2C 6F 75 3D 70  liusBuckley,ou=p
0040: 65 6F 70 6C 65 2C 6F 3D   73 65 76 65 6E 73 65 61  eople,o=sevensea
0050: 73 30 00 A0 1B 30 19 04   17 32 2E 31 36 2E 38 34  s0...0...2.16.84
0060: 30 2E 31 2E 31 31 33 37   33 30 2E 33 2E 34 2E 32  0.1.113730.3.4.2


<- MACHINE1_IP or MACHINE1_NAME:10389

0000: 30 4B 02 01 02 65 46 0A   01 32 04 00 04 3F 66 61  0K...eF..2...?fa
0010: 69 6C 65 64 20 6F 6E 20   73 65 61 72 63 68 20 6F  iled on search o
0020: 70 65 72 61 74 69 6F 6E   3A 20 41 6E 6F 6E 79 6D  peration: Anonym
0030: 6F 75 73 20 62 69 6E 64   73 20 68 61 76 65 20 62  ous binds have b
0040: 65 65 6E 20 64 69 73 61   62 6C 65 64 21           een disabled!

javax.naming.NoPermissionException: [LDAP: error code 50 - failed on search operation: Anonymous binds have been disabled!]; remaining name ''
        at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
        at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
        at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
        at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
        at javax.naming.directory.InitialDirContext.search(Unknown Source)
        at SimpleQuery.main(SimpleQuery.java:31)
Error: javax.naming.NoPermissionException: [LDAP: error code 50 - failed on search operation: Anonymous binds have been disabled!]; remaining name ''

I tried updating the value of property "allowAnonymousAccess" to "true" in server.xml at %APACHE_DS_HOME%\conf, but no success.

Following are the contents found in the LDIF file exported using JXplorer LDAP browser

version: 1
dn: o=sevenseas
objectClass: organization
objectClass: extensibleObject
objectClass: top
dc: example

dn: ou=people,o=sevenseas
objectClass: organizationalUnit
objectClass: top
description: Contains entries which describe persons (seamen)
ou: people

dn: cn=HoratioHornblower,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: HoratioHornblower
description: Capt. Horatio Hornblower, R.N
givenname: Horatio
mail: [e-mail]
sn: Hornblower
uid: hhornblo
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: cn=WilliamBush,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: WilliamBush
description: Lt. William Bush
givenname: William
mail: [e-mail]
manager: cn=Horatio Hornblower,ou=people,o=sevenSeas
sn: Bush
uid: wbush
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: cn=ThomasQuist,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: ThomasQuist
description: Seaman Quist
givenname: Thomas
mail: [e-mail]
manager: cn=Horatio Hornblower,ou=people,o=sevenSeas
sn: Quist
uid: tquist
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: cn=MoultrieCrystal,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: MoultrieCrystal
description: Lt. Crystal
givenname: Moultrie
mail: [e-mail]
manager: cn=Horatio Hornblower,ou=people,o=sevenSeas
sn: Crystal
uid: mchrysta
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: cn=HoratioNelson,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: HoratioNelson
description: Lord Horatio Nelson
givenname: Horatio
mail: [e-mail]
sn: Nelson
uid: hnelson
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: cn=ThomasMastermanHardy,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: ThomasMastermanHardy
description: Sir Thomas Masterman Hardy
givenname: Thomas
mail: [e-mail]
manager: cn=Horatio Nelson,ou=people,o=sevenSeas
sn: Hardy
uid: thardy
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: cn=CorneliusBuckley,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: CorneliusBuckley
description: LM Cornelius Buckley
displayname: Cor Buckley
givenname: Cornelius
mail: [e-mail]
manager: cn=Horatio Nelson,ou=people,o=sevenSeas
sn: Buckley
title: 
uid: cbuckley
userpassword:: e01ENX1YcjRpbE96UTRQQ09xM2FRMHFidWFRPT0=

dn: cn=WilliamBligh,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: WilliamBligh
description: Captain William Bligh
givenname: William
mail: [e-mail]
sn: Bligh
uid: wbligh
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: cn=FletcherChristian,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: FletcherChristian
description: Lieutenant Fletcher Christian
givenname: Fletcher
mail: [e-mail]
manager: cn=William Bligh,ou=people,o=sevenSeas
sn: Christian
uid: fchristi
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: cn=JohnFryer,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: JohnFryer
description: Master John Fryer
givenname: John
mail: [e-mail]
manager: cn=William Bligh,ou=people,o=sevenSeas
sn: Fryer
uid: jfryer
userpassword:: dGVzdA==

dn: cn=JohnHallett,ou=people,o=sevenseas
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: top
cn: JohnHallett
description: Midshipman John Hallett
givenname: John
mail: [e-mail]
manager: cn=William Bligh,ou=people,o=sevenSeas
sn: Hallett
uid: jhallett
userpassword:: e1NIQX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9

dn: ou=groups,o=sevenseas
objectClass: organizationalUnit
objectClass: top
description: Contains entries which describe groups (crews, for instance)
ou: groups

dn: ou=crews,ou=groups,o=sevenseas
objectClass: organizationalUnit
objectClass: top
description: Contains entries which describe ship crews
ou: crews

dn: cn=HMS Lydia,ou=crews,ou=groups,o=sevenseas
objectClass: groupOfUniqueNames
objectClass: top
cn: HMS Lydia
uniquemember: cn=Horatio Hornblower,ou=people,o=sevenSeas
uniquemember: cn=William Bush,ou=people,o=sevenSeas
uniquemember: cn=Thomas Quist,ou=people,o=sevenSeas
uniquemember: cn=Moultrie Crystal,ou=people,o=sevenSeas

dn: cn=HMS Victory,ou=crews,ou=groups,o=sevenseas
objectClass: groupOfUniqueNames
objectClass: top
cn: HMS Victory
uniquemember: cn=Horatio Nelson,ou=people,o=sevenSeas
uniquemember: cn=Thomas Masterman Hardy,ou=people,o=sevenSeas
uniquemember: cn=Cornelius Buckley,ou=people,o=sevenSeas

dn: cn=HMS Bounty,ou=crews,ou=groups,o=sevenseas
objectClass: groupOfUniqueNames
objectClass: top
cn: HMS Bounty
uniquemember: cn=William Bligh,ou=people,o=sevenSeas
uniquemember: cn=Fletcher Christian,ou=people,o=sevenSeas
uniquemember: cn=John Fryer,ou=people,o=sevenSeas
uniquemember: cn=John Hallett,ou=people,o=sevenSeas

dn: ou=ranks,ou=groups,o=sevenseas
objectClass: organizationalUnit
objectClass: top
description: Contains entries which describe naval ranks (e.g. captain)
ou: ranks

Any inputs on resolving this problem would be a great help.

Thanks in advance.